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In accordance with your request, enclosed please find a copy of the 
Declaration which was filed with the Amendment on May 26, 2004. along with the 
Appendix A attached thereto. If you have any further questions please feel free to 



contact us. 




CONFIDENTIALITY NOlt 
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umbr apptkabie bw. If yoa (he reader of this message, ^ not (he intended recfpletrt or the emptoyee or agent responslWe for defiverihg 9ib message to Ihe 
inffinded ledpient you are hemtiy notrfisd that you should oopy this jacsimH^ or distribule it to anyone other than the inleiKted recipient In addHton, if you have 
ieceh«d this telecopy In enor, please Immediately notify us by letephonearlelelax and ne^ the onginal message to us at the addrsK above vie the United Slabs 
PastalSenrice: Frally, if itwouMnd Inconvenience youL we wouMspp Thankyou. 



I£ this ursinsmisBion Is not well received, please advise us ac our telecopier 
no. 202-737-3S2Q or hy e-mail at znall&^rowdynelmark . com, or cslLI our- voice 
telephone no, 202 "628 "5197 . 
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Mftii Stop Non-Fee Amandment 
5 Contois 5 loner for Patents 
PO Box 14^0 

Alejtaadrier VA 22313-1450 

DMDBR 37 CPR 1.131 

1,0 sis". 

We, the undersigned, Allon Adir, Boy Emek, and Eitan Marcus 
hereby declare as follows i 

^l^e Applicants in the patent application identic 
fied above, and are co-in^entora of the subject matter described 
and Claimed in clairas 12-14, 16-19, 29-34, 36-39, 41-47, and 49- 
• 52 therein . 

20 2) Prior to January 3, 2002, we conceived our invention, as 

described and claimed, in the subject Application, in Israel, a 
wro meraber country. Conception of the invention is evidenced by 
• a nisrked-up draft copy of the disoloaure of the Application, 
which was included in an electronic mail communication transmit- 
ted by Bitan Marcus prior to January 3, 2002, and which is at- 
tached hereto as Appendix A. Appendix A at page A-1 includes a 
copy of the electronic mail communication, demonstrating an at- 
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42043 Declaration under 37 C»F.R. 131 

tiached Zip archive named ^^^420 43 . aip" . Appendiac A at page A-a 
includes a listing of the coxitent of the Zip archive 42045 -zip r 
indicating- an aa:chived Microsoft Word file naitiecl ^^42045306 .doc" . 
Appendix A at page A-3 ec ^eg-. is a printout of the file 
5 42045S0e.doc, which ia the draft copy of the Application hereof- 

3) Dates deleted from Appendix A are prior to iJan-u- 
ary 3^ 2002. 

10 4) The electronic mail coironunication of Appendix A was 

transmitted to Arthur Bickel, of Sanford T- Colb & Co,, who 
was retained by International Business Machines Corporation 
(IBM) outside counsel for the purpose of preparing the pres- 

ent patent application. 

15 

5) The following table shows the correspondence between the 
elements of claims 12-14, 16-19, 23-34, 36-39, 41*47, and 49-52 
in the present patent application and statements in the Disclo- 
sure shown in Appendix A3 

20 



cla.ims (Application) 


Disalosure (.Appendix A) 


Claim 12 


Claim 16 


Claim 13 


Claim 17; para- [0039] 


Claim 14 


Claim 18 


Claim 16 


Claim 21 


Claim 17 


Claim 22 


Claizn 16 


Claim 23 


Claim 19 


Claim 24 


Claim 29 


Claim 3 4 


Claim 30 


Claim 35? para, [0039] 


Claim 31 


Claim 3 6 


Claim 32 


Claim 37 


Claizn 33 


Claim 38 
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42045 Declaration undaar 37 CF.R. 131 



Claim 34 


Claim 39 


Claim 3 6 


Claim «1 


Claim 37 


Claim 42 




Claim 43 


Claim 3 9 


Claim 44 


Claim 41 


Claim 46 


claim 42 


Claim 47 


Claim 43 


Claim 48 


Cla,im 44 


Claim 49 


Claim 45 


Claim 50 


Claim 4 6 


Claim 51 


Claim 47 


Claim 52 


Claim 49 


Claim 54 


Claim 5 0 


Claim 55 


Claim 51 


Claim 56 


Claim 52 


CJLaim 57 



Thi3 table domons'tiraties that we cjonc^iv-ed. the entira invention^ 
aa recited in claims 12-14, 16-19, 29-34, 36^39, 41-47, and 49- 
52/ prior to January 3, 2002. 

€) On Jani^iary 2, 2002, Dr. SickeX sent u5 a revised draf'b o£ 
the Application, On al>out i^anuary 3, 20 02 we appX'oved tuhe re- 
vised draft of the Application,- and it was then sent to the 
United STldtes/ where it was filed on January 9^ 2002. 

7) At the time the imrention was made, wa were oblig^ated to 
aaeign the claimed invenrion to XBM*« 

8) We hereby declare that all statements made herein of our 
IS own knowledge are true and that all statements made on informa- 
tion and conjecture are thought to be true; and further that 
theae stafcem^ents were made with the knowledge that willful false 
statements and the like so made are punishable by fine or im- 
prisonment, or both, under Section lOOl of Title Id of the 

II*9-2001'-0019 ^ 
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42045 



Declairation luncler 37 C,F»R, 131 



Onttfid States Code suid tiiat such willful :false sratenient;^ may 
jeopardize the validity o£ the application of any patent issued 
thereon* 



Allon Adir, Citizeft of Israel, 
70 Allonim Street^ Xivon^ Is- 
rael 



Date: 



Kitan HArpxC&r Citizen of Is- 
ri=vel, § !■ ■ gti i ^g ' SLA.ii i j.L-> Haifa ^ le- 
rael ^ (^f^AJw'W'^ 



Roy Bjlfiek, Citizen of isxael. 



Date: 



Dace : 
2- C-l^"^ 
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Artfair 

IVe made a fsu^ cormtdn^ to the die. Pieas caS me at 04-82^294. 

Thanks . 
Eftan 

(See stttach^d ^s; 42045;ap) 



I Eltan Marcos 

I Verification TecNiotoaies Department 
IBM Research Lab 
Haifa, Israel ■ 

Fsx +972-4-855-0070 
emsit marcust^libm.com 
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Adaptive Test Program generation 

BACKGROUND OF THE INA^NTION 

1. Field of the invention. 

[OOOlJ This Invention generally relates to test pnogram generation; and 
5 more speciflcBlly relates to a computer mechanism and method for testing a 
design for compliance with the design specificah'on. * 

2. Description of the Related Art 

[0002.] The extension of modem^ informaUon technology into everyday 
life rs due in large part to the e>dstence, functionality and relatively low cost 
10 of advanced integrated drcuits, and in particular to advancements in com- 
• puter processors. As technology has advanced^ the sophistication of both the 
hardware and software of computer systems have greatly Increased. An Im- 
portant aspect of designing an advanced computer system is the ability to 
thoroughly t^M^iiii^^lWgMMIMl^ 

gSm§ggi^i^^M^4^S§iM k ^^ vennca- 
tion requires the generatiori of a large number of InsCmction sequences to as- 
sure that the system behaves properly under a wide variety of circumstances. 
[0003.] Test program generators are basically sophisticated software en- 

20 gineS; which are used to create numerous test cases. By appropriate con- 
figuration, it Is possible for test program generation, to be focused on very 
specific ranges of conditions, or broadened to cover a wide range of logic 
Today, large numbers of test cases can be created In the time that a single 
test case could be written manually, as was done prior tD tiie advent of test 

25 program generators. 

page A-3 

IL9-2001-0019 



PAGE 15/45 * RCVD AT 6/8/2004 12:20:59 PM [Eastern Daylight rime] " SVR;USPT0-EFXI^-1/4 ' DNIS:8729306 ' CSID:202 737 3528 ' DURATION (mm-ss);1 D44 



JUN. 8. 2004 12:26PM 



6R0WDY AND NEIMARK 



NO. 2409 P. 16 



42045 



DRAFT IBM CONFIDENTIAL 



Ver. 42045S06 



10 



15 



25 



[0004.1 Typically, the input to the test program generator is a sequence 
of partially spedfisd instnicUons, wlilch acts as a template for the test to be 
generated. The Instruchon stream is generally ihcompleCe, in that various 
details of each instruction^ such as the spedfic source and the target re- 
sources to be used, the data values of each uninitialized resource, and even 
the type of the InstnxsHon to be generated, may be left unspecified. The test 
program generator then generates a complete test by filling In the missing 
Information with valid combinations of random values, or values that it as- 
sumes to be likely to generate an interesting test Tlie choice of random val- 
ues is often biased, either explicitly in the input file, or through testing knowl- 
edge known to the test program generator, so as to increase the likelihood of 
detecting a design flaw. The use of templates in this manner allows the crea- 
tion of numerous test cases that stress the implementation of the logic of ttie 
design. 
[0005.] 




20 



It is being generated. The in- 
formah'on obtained from the simulation is used to guide the test program 
generator, without forcing it to resort to extensive speculshon as to what val- 
ues may be desirable. 

[0007.] During the past decade, model-based random test program gen- 
erators have become popular in processor architectural design verification 
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and software testing. An example of such b random test generators include 
the IBM tool, ^'Genesys", which \s disclosed in the document Model-Based 
Test Generation for Process Design Verification, Y. Lichtensteln et ^l.r Sixth 
Innovative Applications of Artificial Intelligence Conference, August 1994, pp. 
5 83-94. 

[0008.] Another conventional test generator, AVPGEN, is disclosed in the 
document AVPGEN - A G&ieratorjbr Archi^ure yerificaUon Tek Cases^ A. 
Chandra, etat IEEE Trans. Very Large Scale Integration CVLSI) SysL 3, No. 
2, 188-200 (June 1995). 
10 [0009-] Known test program generators are limited in their abilities Go 
adapt to unexpected situations encountered during the best; and offer at best 
ad hoc, solutions to hancjle situations such as program intemtpbs. 



SUMMARY OF THE INVENTION 




20 [0011.] It is another advantage of some aspects of the present invention 
that benefidal situations encountered during test program generation can be 
recognized and exploited. 



[0012.] It is yet another advantage of some aspects of the present inven- 
tion, that detrimental, situations or failures encountered during test program 
25 generation can be recognized and avoided before they happen. 

page A-S 

1L9-2001-0019 • 



PAGE 17/45 ' RCVD AT 6/8/2004 12:20:59 PM [Eastern Daylight Time] ' SVR:USPT0-EFXRF-1/4 ' DNIS:8729306 * CSiD:202 737 3528 ' DURATION (mn)-S5):1044 



JUN. 8.2004 12:26PM BROWDY AND NEIMARK NO. 2409 P. 18 



42045 



Ver- 42045S06 

DRAFT IBM CONFIDENTIAL 



[0013.] It is a further advantage of some aspects of the present invention 
that events to be recognized during best program generation can l^e defined 
without modiflcaUon or recompilatlon of a test program generator- 
[0014.] It Is yet a further advantage of some aspects of the present in- 
5 ventlon that the body of events defines an a lternative inout stream to bQ 
gpnRrafed, and uses is doflncd using the same language gs ttie pne used for 
generating die main Instruction stream. 

[0015.] These and other advantages of the present invention are attained 
by a test program generator that produces test instructions according to as- 

10 pecification of a design being verified. TTie instructions are.typlcally generated 
randomly, , at least In part. The system is capable of interpreting defined 
events/ detecting an impending occurrence of an event by evaluating the 
condition of the event, and responding to the event by generating an alter- 
nate insbxjction stream d^ned as part of the event 

15 [0016.]. An importar* consequence of using randomly generated test 
cases Is that the execution of the test may lead to situations that cannot be 
anticipated at the b'me the Input insbuction stream is written. Bcamples of 
such events Include (1) program Interrupts, (2) the event that there is insuffi- 
cient continuous unoccupied memory to store subsequent insfructlons, and 

20 (3) felse branch prediction. 

[0017.] Some of the above noted events, for example the event that 
• there is Insufficient continuous unoccupied memory are detrimental, because 
they are likely to cause failure of test program generation. Other events may 
be viewed as beneficial. In diat the situation that arises on their occumence 

25 can be exploited to increase the likelihood of finding design flaws. 
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[0018.] In order to deal with events such as the exemplary events noted 
above, it is desirable to generaHe an alternab've instruction stream. In the 
case of detrimental events, the approach Is to detect the situation prior to Its 
actual occurrence, and issuing appropriate instructions to avoid its occur- 
5 rence. Beneficial events also need to be detected, so that alternative insb\ic- 
Hons may be inserted into the test to exploH: the situation. 
[0019.] The ability of users to detect the occurrence of triggering condi- 
tions of event? and to inject an alternative Instoiction stream into the test 
program is referred to herein as ""adaptive test program generation''. Using 
10 adaptive test pro9ram generation, users can define multiple input streams for 
the test program generator that are reactive to the running states of the gen- 
eration. Because of randomness, such states cannot be known at the time the 
Input is ZZLdefiO 
ned. 

15 {Textual version of daims to be inserted here once they are agreed 
upon> 

BRIEF DESCRIPTION OP THE DRAWINGS 

[0020.] For a better understanding of these and other objects of the pre- 
sent invention, reference is made to the detailed description of the Invention, 
20 by way of example, which is to be read in conjunction with Uie following 
drawings, wherein: 

[0021.] Rg. 1 is a block diagram of a test program generator that Is oper- 
able in accordance with a preferred embodiment of the Invention; 
[0022.] ng. 2 is a block diagram of an Input file structure in accordance 
25 with a preferred embodiment of Uie invention; 
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[0023.] Fig» 3 is a block diagram illustrab'ng the structure of an event, 
which Is operative tn the test program generator shown in Fig. 1 In accor- 
■ dance with a preferred embodiment of the invention; 

|:q024.] Rg. 4 is a block diagrarh illusCraang a test generator engine of the 
5 test program generator shown in Rg, 1 in accordance with a preferred em- 
bodiment of the invention; and 

|;0025.] Rg. 5 is a flow chart of a method of test program generation^ 
which IS operative in accordance with a preferred embodiment of the inven- 
don, 

10 DESCRIPTION OF THE PREFERRED EMBODIMENT 

[0026.] In the following description, numerous specific details are set 

forth In order to provide a thorough understanding of the present Invention. 
It wiI^^be apparent however, to one skilled in the art ftat the present Inven- 
tion may be practiced without these specific details. In other instances well 

15 known circuits, control logic, and the details of computer program inshuctions 
for conventional algorithms and processes have not been shown In detail in 
order not to unnecessarily obscure the present invention. 
[0027.] Software programming code, which embodies aspects of the pre- 
sent invention, is typically maintained in permanent storage, such as a com- 

20 puter readable medium. In a client/server environmeni;, such software pro- 
gramming code may be stored on a client or a server. The software pro- 
gramming code may be embodied on any of a variety of known media for use 
witii a data processing system, such as a diskette, or hard drive, or CD-ROM. 
The code may be distributed on such media, or may be dtstrtbutBd to users 

25 from the memory ,or storage of one computer system over a network of some 
type to other computer systems for use by users of such other systems. The 
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techniques and method? for embodying software program code on physical 
media and distributing software code via nehnrorks are. well known and will 
not be further discussed herein. 
Definitions. 

• 5 [0028-] A "^Statement" is a single item Chot defines o stream entity for 

controlling generation of the test, Statemenis can either be '"Instruction 

statements'^ (partially specified instmctlons'^ which describe Instructions to be 

generated^ or ''contanol statements^ which direct: the flow of control of qth^r 

< 

statements, 

10 £0029.] /El^: This shoufd be after Daraaraph 32 where we define events 
and input stream] A ""definib'on file" or ""input file" is a file, In which \he 
stal^ents and events for a test are stored. It directs generation of the test. 
[0030.} FEM: delete tt iis we have oaraoraDh 33 instead! An "input staieam" | 
is a set of statements. 

15 [0031.] A ''directive" is a biasing component that can be attached to 
statements for test program generation fn multiple areas. 
[0032.] fEl^: This should be after 331 A n ''evenf is a combination of a 
condition and an input stream or otroam cnlity> Tl^e input. stream Is used to 
generate Instructions if the condition is satisfied: 
. 20 [0033.] An (tills is an instruction statement) "Mnsbxictlon stream" or ''in- 
put stream'y is a sequence of partially specified insbuctions, which achs as a 
template for the test program to be generated. 
Arc^iitectural Overview. 

[0034.] Reference is now made to Rg. 1, which Is a block diagram of a 
25 test program generator that is operable In accordance with a preferred em- 
bodiment of the invention. A design verification system 10,. used for verilying 
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a software or hardware design, has several basic Interacting components. 

»rp immrtantT Those components of the design verificaOon sy^ 
tem 10 that are located above a broken line 12 are dependent on the spedfl- 
caBon of the design being verified, while ttiose.located below the line .12 are 
5 Independent of the specification. 

[0035-3 The design verification system 10 enables the creation of tests 
that have various degrees of randomness. Ihe ability of the design verifica- 
tion system 10 to introduce random unspecified parameters is fijndamental, 
since design flaws in practice are usually unpredictable. 
10 [0036.1 A |-PM. Arthur I h ^r<>. Vnx not dri\^inn vOU cra>Vr but ftftPr spgalgnq 
»^Korc jh may hp. better H*^ ^hnut architecturai models. .Simlla^iY, ^^(^ 
^^. ^i fr^thf^r tha n ^>Ph^^^inral^ simiilatnrl grchi^gcturgl . ipcdflcab-on 
nioderi4 holds a formal description of the spedficab'on df the system. This 
specification may be stored In a dataisase, which may also Incorporate testing 
15 knowledge of the system design. The InbegraOon of all the information stored 
in the spedflcation model 14 Is referred to herein as the knowledge base of 
the test program generator: The knowledge base typically indudes heuristics, 
which represent test engineering expertise, and the knowledge base is de- 
signed to allow expert users to add knowledge. 
20 i:0037.J ■ The content of an Input file 20 Is the input to a generic test pro- 
• gram generator engine 22. The input file 20 Is the main medium through 
which the test program generator engine 22 is influenced. This influence in- 
dudes, for example, the identity of the test Instructions, ttieir relative order, 
and various events relating to the instrudions. The test program generator 
25 . engine.22 incorporates an event mechanism 23 for detecting and processing 
events in the input file 20. 
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[0038*] It is an important aspect of the invention Chat alternative Input 
streams can be defined. These Input streams are reactive to conditions that 
could occur during the execution of a test In some cases, an input stream, 
may exploit some condition, while in other cases the input stream may be de- 
5 signed to avoid the occurrence of a condition. Adaptive test program genera- 
tion is achieved in the design verification system 10 by event detection and 
handling using the event mechanism 23. 

10 mm^i^mmm^^mm^mmm^m^ 




15 mgCTiigiliiiiitSgiii^^iMi^ii^l^iiHi 

[0040.] In addition to receiving input via the input file 20^ the test pro- 
gram generator engine 22 receives Input irrformatfon ftiom the architectural 
speeifisfeiefi model. 14. The test program generator engine 22 generates test 

20 . programs 24, during which process InstnJCBons are executed on a architect 
ailgLfee havior a i simuiator 26, and ultimately executed on a targ^ or design 
2Sr which can be a simulator. This produces results 29, The tesjt program 
generator engine 22 may receive some generic knowledge of the specifica- 
tion^ and can exploit this knowledge so as to generate sequerKes of instruc" 

25 dons. 
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[0041.] The output of the test program generator engine 22 is a se- 
quence of Instructions, In a dynamic mode of operation, each Instruction is 
first generabed by the test program generator engine 22 and is then simu- 
lated by the architec±ijral behoviorQ l simulator 26. Generation typically In- 
volves selecbng the instruction, the operands and the resources, and initial- 
izing the resources. As this Is done, the instruction buUt by the test program 
generator engine 22 is' passed to the architectural bQhDvloroi simulator 26 
slmulotor, and eventually b> the design 28 for execution. "This cycle continues 
with the next Instruction. 

[0042J The behavioral simulator 26 is used to predict the results of in- 
stnidJon execution in accordance with the speciflcatidn of the system being 
verified. Any conventional behavioral simulator Is suitable for the behavioral 
simulator 26- 
Input file Details. 

[0043.] Reference is now mad6 to Rg. 2, which is a high level block dia- 
gram of an input file In accordance with a preffen^d embodiment of. the in- 
vention- Input files are a preferred medium for practicing the present inven- 
tion. The input ffle 20 Is essentially a list of statements 30 for controlling the 
t^t output TTiere are various types of statements. The statements 30 may 
mdude^ an event 34, and conventional Instructions (not shown) that are un- 
related to events. 
Aistnictlons* 

[0044.] Instructions are the most basic statements in the input file 20. In- 
structions may t)e modified l^y operand blasjng, biasing functions or direc- 



tives. 



page A- 12 



IL9-2001-0019 



PAGE 24/45 ' RCVD AT 6/8/2004 12:20:59 PM [Eastern Daylight fime] ' SVR:USPT0-EFXRF-1/4 ' DNIS:8729306 ' CSID:202 737 3528 ' DURATION (inm-ss):1044 



JUN. 8.2004 12:28PM BROWDY AND NEIMARK NO. 2409 P. 25 

) > ' . 



42045 Ven 42045S06 

DRAFT IBM CONFIDENTIAL 

11 

Statements. 

[0045.] The statements 30 in the input file 20 actually consb'tute a pro- 
gram that Is interpreted by the test program generator engine 22. The pro- 
gramming language Includes constructs that are used to control the operaUon 
5 of the test program generator engine 22. The language includes conditional 
statements, which can reference the current state of the program generated 
by the test program generator engine 22. These control constructs are not 
themselves generated. 
Events^ 

10 [0046.] Reference Is now made to Ffg. 3, which is a block diagram Illus- 
trating the structure of an event 34 (Rg. 2) which is operative In accordance 
with a preferred embodfrhent of the Invention. The event 34 has a group of 
specialized attributes: an identifying name 36/ a triggering condition 38/ a 
priority value 40 and an input stream or body 42 tiiat defines Instructions Co 

IS be generated. 

[0047.] The name 36 Is simply die Identifier of the event It is a required 
attribute. 

[0048.1 The triggering cxjndition 3.8 is a condition that is checked to de- 
cide whether the body 42 should be used to generate instructions. It a re- 

20 quired atiribute. In some cases the triggering condition 38 can be given die 
value TRUE, in whfch case the body 42 is always used. 
[0049.] In some embodiments, events may be specified directiy In the in- 
put files. In other embodiments/ events may be stored iri separate event files, 
which are included by tiie Input file 20. It is also possible for event files to In- 

25 elude other event files. 
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[0050.] Reference is now made to Rg. 4, which is a block diagram Mlus- 
traUng the test generator engine In further detail, in accordance with a pre- 
ferred embodiment of the invention. The test program generator engine 22 
(Rg. 1) maintains a list of events 44. Each of ttie events 44 includes a 

5 name 46, and Is used for purposes of identification, a triggering condition 48, 
a body 50, which is an aliemative InsbucBon stream to be generated when 
the event occurs, and further includes a relative priority value 52. Evaluation 
of triggering conditions by the test program generator engine 22 occurs in 
order of the priority value 52. 

10 [0051.] Usdng 1 is a high level procedure which is encoded into the test 
program generator engine 22 for the detection and handling of events that 
ai« defined in the input file. 

Listing 1 

Procedure: HandleEvents 

15 Input: currentstatement 

1. Foreacheventeh in order of priority 



20 



// check if event is disablg dsupprcsscd . 

2. If icurrentStatement -> Diabjg sSupprcsoc ! j (eh) 

//evaluate triggering condition 
3.lf eh->CondltIonIsTriggeredO 



//generate the instruchon stream with the 
25 //event as specified by its body 

4. eh->GeneratdnstrucdonSb^mD 

i:0052.] The procedure HandleEvents in Usting 1 is called by the test pro- 
gram generator engine 22 before each rnstmction is generated. 
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[0053.] Design flaws are often exposed ©nly when two or more events 
occur concomitanfly. For example, a program interrupt occurring while an- 
other [nfcerrupt is being handled, or following a false branch prediction. In or- 
der to expose such flaws, the procedure HandleEvents is designed to handle 
5 events recursively. When nesting of events occurs, the processing of the pri- 
mary event Is paused vyhile the secondary event is handled. 
Examples* 

[0054.] The following two examples are useful In explaining the operaQon 
of an event according to the invention. In Ush'ng 2 and Listing 3, the body of 
10 the named event is a single instruction. However the body of an event Is an 
input stream^ arid not limited to a single instruction. 
Branch*on-zero event. 

[0055.] A branch-on-zero event occurs whenever the zero bit of a pat^ 
ticular condiCionai register is set Recognition of the branch-on-zen? event by 
15 the test program generator engine 22 (Rg. 1), using one of the events 44 
(Fig. 4), results in the generation of a conditional branch. The particulars of 
the event for the branch-on-zero event are shown in Usting 2. 

. Usting 2 

Name: BranchOnZero 
20 //Checkffthezero bit of the condition register 

// is set 

cond: ConditionRegisterZero = 1 . 

//issue a conditional branch on zero instruction 
25 body: 

bez 
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Escape Sequence Event. 

[0056.] An escape sequence event occurs whenever there Is insufficient 
uniniaallzed memory at the address cun-enUy held in the program counter 
5 (PQ. Recognitton of the escape sequence event by the test program genera- 
■ tor engine 22, using another one of the events 44, causes the generation of 
an unconditional branch to an unoccupied memory location using the event 
mechanism 23. The particulars of the event for the escape sequence event 
are shown in Listing 3. 

10 Listing 3 

name: EscapeSequence 

//checic that there is sufficient room to write 
//a branch instruction, but nothing eise 
IS cond; ilslnltialized ($PQ AND Islnitialized ($PC+4) 

//generated branch instruction 
body: 
• br 

20 

Intemipt Handler. 

[0057.] The event shown in UstIng-4 is. typical of an interrupt handler 
generated by the test program generator engine 22 (Rg. 1). It responds to 
25 an event entitled ''DSI", which Involves an intenojpt, and includes instructions 
that return, the program counter to the address immediately following the In- 
stnjcoon that caused the Interrupt The triggering condition for the event is 
that the program counter contains the address, (or addresses) appropriate to 
the intemjpt. 

page A-i6 

IlJ-2001-0019 



PAGE 28/4S ' RCVD AT 61812004 12:20:59 PM [Eastern Daylight rime] * SVR:USPT0-EFXRF-1/4 * DNIS:8729306 * CSID:202 737 3528 * DURATION (min-s$):10^ 



JUN. 8.2004 12:29PM BROWOY AND NEIMARK NO. 2409 P. 29 



42045 Ver. 42045S06 

DRAFT IBM CONFIDENTIAL 



15 * 
UsUng 4 

Name: DSIL.InterruptJHandler 

5 //check that DSI exception occurred 

cond: $PC ^= 0x0000000000000300 1 1 
$PC 0x0000000000000304 

//g^er^ted handler instrucQons 
10 body: 

mfsrrO G28 
addi G28,G28,Qx4 
mtsrrOG28 
mtdarG28 
15 rfld 

Operation. 

[0058.] Reference Is now made to Rg. 5, which is a flow chart illustrating 
a med^od of test program generab'on/ which is operative in accordance with a 

20 preferred embodiment of the invention. The description of Fig.. 5 should be 
read in conjuncdon with Rgs. 1, 2, 3, and 4, The test program generation cy- 
cle begins at initial step 54, in which the design verification system 10 (Fig, 1) 
15 configured for testing the system design. Appropriate files are loaded In or- 
der to Initialize the test program generator engine 22, the speclflcation model 

25 ■ 14, the beha>rforal simulator 26, and the design 28. 

[0059.] Next, at step 60, the test program generator engine 22 reads the 
Input file 20. In particular, each event 34 is interpreted by the test program 
generator engine 22, and stored in a list of events 44 (Rg. 4). FEM: Fm as- 
suming that this implies that the main input stream is also reaf;i-L Ror pur- 

30 poses of this disclosure, only the processing of events is disclosed with refer- 
ence to Rg. 5, it being understood that many statements unrelated to events 
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may also be read from the input file 20, which would be processed conven- 
b'onally. • ■ 

[0060.] The list of the events 44 that were developed In step 60 are 
scanned in order of priority. At sbep 70 the member of the list of events 44 

5 having the highest priority, and which Is as yet unevaluated Is selected. 

[0061.] Decision step 72 is an optional step that is perfbrmed in alternate 
embodiments where events may be disabled. Decision step 72 can be omit- 
ted. In which case control passes dlrecHy from step 70 to decision step 76. 
[0062.] At decision step 72 a test Is made bo determine whether the event 

10 selected in step 70 Is currently disabled, if the determination at decision step 
72 Is affirmative, then control proceeds to decision step 76. 
[0063.] If the determination at step 70 is negative, then control proceeds 
to decision st£p 74. 

[0064.] At decision step 74 the event selected In step 70 Is evaluated Id 
15 determine If its triggering condition 48 currently holds. The triggering condi- 
tion 48 is a Boolean expression that Is evaluated by the test program gen- 
erator engine 22, which may refer to current resource values, m such a case 
die test program generator en^ne 22 must refer to the behavioral simula- 
tor 26 In onier to aa^s these values. For example. If tJie test program gen- 
20 erator engine 22 evaluates the condition of die event given in Usting 4, it 
needs to know the value of the program counter register ($PQ, and must 
obtain this value from the behavioral simulator 26. 

[0065.] If the determination at decision step 74 is negative, then control 
proceeds bo decidon sbep 76, which is disclosed below. 
25 [0066.] If the determination at decision step 74 is affirmative, then con- 
trol proceeds to step 78. An alternative fnsUuctlon sfream, specified In the 
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body 50 of the current one of the events 44, is used as a template to genei^ 
ate instructions In Uie same manner as the primary instruction stream. 
Step 78 is typically Implemented recursively. The processing of the primary 
Instruction stream fs suspended until the ALTERNATE INSTRUCTION 
5 STREAM BEGIN IN step 78 is completed. 

[0067.] gM: This Is wrono. after step 78. we continue with 62, but use 
the body of die event rather than the main insruction stream as the input 
stream. This Is importantl Upon completion of step 78, generation of the 
primary Instructibn stream Is resumed, correct this and control is fransferred 

10 to step 62, which Is disclosed below. • . . 

[Q068.] At decision step 76, it is determined if more events remain to be 
evaluated. If tine determination at decision step 76 Is affirmative, then control 
returns to decision step 70 to process the next event 
[0069.1 If the determination at decision step 76 is negative, then control 

15 proceeds to step 62. 

[0070.3 At Step 62 the generation of an instruction stream is begun, A 
current state of the design Is determined, using the behavioral simulator 26. 
Control now proceeds to step 64. 

[nn70a.-) There should be a ste p l:>ehA/ee 62 and 64 which oets the next In- 
20 sb^uctlon statement from the input stream, 

[0071.] At step 64, the test program generator engine 22 proposes an 
instruction. The proposed instruction may be random, depending upon the 
current test program generation policy Fn force< and subject to any rule con- 
25 straints that may be in effect 
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[0072.] Next, at step 66, the proposed Instruction is evaluated in the be- 
havioral simufator 26, The states of me design existing immediately prior to 
execution of the Instruction, and the predicted state fbilowing execution of 
the InstmcOon are then both Icnown. 

5 [0073.] . Next, in step 68, the test program generator engine 22 outputs 
the Instruction part of the test program generated that was proposed at | 
step 64 into the InstrudJon stream. Control passes to decision step 80, 
[0074.] ■ At decision step 80, It is determined If more instnjctions need to 
be generated In the test. If the determination at decision step 80 is affimia- 

10 live, tlien control returns to step 70- 

[0075.] If the determination at decision step 80 is negative then conb-ol 
proceeds to final step 82, and the curent phase of the test program genera- 
tion c/cle is complete. 
Alternative Modes of Operation.. 

15 [0076.] In some embodiments, for any Insbxictlpn, or sequence of in- 
stnjcdons In the input stream, it may be specified that detection and acdva- 
tion of a particular event should be disabled during test program generation. 
This provides enhanced control of the test program generation process. 

20 [0077.]. While this invention has been explained with reference to the 
structure disclosed herein, it is not confined to the details set forth, and tiiis 
application is intended to cover any modifications and changes as may come 
within the scope of the following claims: 
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What is claimed is . 

1. A system for verification of a system design, comprising: 
5 a test program generator that accepts a sequence of statements including at 
least one event; 

an event handling tacility in said test program generator; and 
wherein responsive to a triggering condition of said event said test program 
generator emits INSTRUCTIONS RESPONSIVE to one of a primary in- 
10 • struction stream and an alternate instruction stream, said alternate instruc- 
tion stream being represented in a body of said event. 

2..The system according to daim 1, wherein said event comprises a plurality 
of events that are processed In order of priority values thereof In said event 
15 handling fedlHy. 

3. The system acconjing to dalm 1^ wherein said body of said event com- 
prises program Instrudion statements that are Interpreted by said test pro- 
gram generator. 

20 

4. The system according to daim 3, wherein a conditional statement of said 
. event program instructions references a current state of a program that Is 

generated said test program generator. 

2S 5. A method of test program generation, comprising the steps of: 

defining a set of statements, said set of statements inducDng ah event; 
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responsive to said set of statements generating a test program of Isntructfons 
stream of instructions for a target; 

while performing said step of generating said stream or instructions deter- 
mining if a condition of said event is satisfied; and 
5 respon^ve to said step of determining generating an alternate tdst prograjrt 
of isntrucQons stream of instrucbons. 

6. The method according to claim 5, wherein said step of determining is per- 
formed by evaluating a state of said target prior to Indusion of an Instruction 

10 in said stream of instructions. • . 

7. The method according to claim 6, wherein said step of evaluating said 
state is performed prior to a simulated execution of said instruction, 

15 8. The mediod according to daim 6, wherein said step of evaluating said 
state is performed subsequent to a simulated execution of said instniction. 

9. TTie method according to claim 6, wherein said step of evaluating said 
state is perfooDed a first time prior to a simulated execution of said instruc- 

20 tion and is performed a second time subsequent to said simulated execution 
thereof. 

10. The method according to claim 5, wherein at least a portion of said 
stream of instructions are randomly generated selected. 

25 
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11. The method according to claim 5, wherein said event comprises a plural- 
ity of events^ each of said events having a priority value, and said step of 
determining If said condition is satisfied is performed witii respect to each of 
said events in an order of said priority value thereof. 

5 

12. The method according to daim 5, wherein said event has an identifying 
name attribute, 

13. The method accoixltng to daim 5, wherein said event has a triggering 
10 condition attribute. 

14. The method according to claim 5, wherein said event comprises a Input 
stream stream entity. 

IS 15. The method according to claim 5, wherein said event comprises an Iden- 
tifying name attributCr a triggering condition attribute, and a stream entity, 
and a priority value. 

16, A method of test program generation^ comprising the steps of: 
^0 providing a test program generation engine; 

coupling said test program generation engine to a design specification of a 
target, wherein said design spedficab'on comprises a (<nowledge base; 
coupling said test program generation engine to a behavior simulator of said 
target; 

25 • introducing a set of statements into said test program generation engine, said 
set of statements indudrng an event; 
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determining whether a triggering condition of said event is satisfied; 
in a first case, wheriain said triggering condition is satisfied, causing said test 
program generation engine to generate a test instructions based on first 
stream of instructions that can be executed on said target; and 
5 in a second case, wherein said triggering condition Is not satisfied, causing 
said t^ program generation engine to generate a second stream of Instruc- 
tions that can be executed on said targeL 

17. The method according to claim 16, wherein at least a portion of said in- 
10 struction Is generated randomly. 

18. The metlTOd according to claim 16, wherein said step of determining is 
performed by evaluating a state of saJd target prior to inclusion of said in- 
struction in said first stream of instructions, 

15 • ' 

19. The method according to claini 18, wherein said step of evaluabng said 
slate Is perfomied prior to said simulated execution of said insbrticBon. 

20: Th? method according to daim 16, wherein said event comprises a plu- 
20 raKty of events, each of said events having a priority value, and said step of 
determining is performed with respect to each of said events in an order of 
said priority value thereof. 

21. The method according to claim 16, wherein said set of statements is in- 
25 troduced into said test program generation engine as an input file. 
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22. The method according to claim 15, wherein said event has an Identifying 
name attribute. 

23. Ttie method according to claim 16, wherein said event has a triggering 
5 condition attribute. 

24. The method according to claim 16, wherein said event comprises a 
stream entity. 

10 25. Ttie metiiod according to daim 16, wherein said event comprises an 
Identifying name attribute,, a triggering condition atb-lbute, and a stream en- 
tity, 

26. A computer software product, comprising a computer-readable medium in 
15 which computer program instrucb'ons are stored, which insbojctions, when 
read by a computer, cause the computer to generate test programs by per- 
forming the steps of: * 

accepting a set of statements, said set of statements including an event; 
responsive to sard set of statements generating a stream of Instructions for a 
20 target; 

while performing said step of generating said A-eam of instructions deter- 
mining if a condition of said event is satisfied; and 

responsive to said step of determining generating an alternate stream of In-, 
strucb'ons. 

25 
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27. The computer software product according to claim Z6, further comprising 
the steps of accessing a knowledge base having information of said target 
stored therein, and said step of generating said stream of inslnjcb'ons com- 
prises selecting members of said stream of instructions In accordance with 

5 said information in said knowledge base, wherein said step of selecting is bi- 
ased by said set of statements. ' 

28. The computer software product according to daim 26, wherein at least a 
portion of said stream of instructions are randomly selected. 

10 

29. The computer software product according to claim 26, wherein said event 
comprises a plurality of events, each of said events having a priority value, 
and said step of determining if said condidgn is satisfied is peri'ormed with re- 
spect to each of said events In an order of said priority value thereof: 

15 

30- The computer software product according Co claim 26, wherein said event 
has an IdenOfVing name atblbute. 

31. The computer software product according to claim 26, wfierein said event 
20 has a triggering condition attribute. 

32, The computer software product according to claim 26, wherein said event 
comprises a body that is a template for generation of said alternate strearn of 
ihstmctjons. . 
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33. The computer software" product according to daim 26, wherein said event 
comprises an identifying name attribute, a triggering condition attribute, and 
a stream entity, 

5 34- A computer software product, comprising a computer-readable medium In 
which computer program instructions are stored, which Insbrucdons, when 
read by a computer, cause Hie computer to generate test programs by per- ' 
fonming the steps of: 

defining a test program generab'on engine in a memory; 

10 defining a design spedficatton of a target in said memory/wfierein said de- 
sign spedficaaon comprises a l<nowledge base; 
defining a behavior simulator of said target in ^id memory; 
coupling said test program generation engine to said design specification; 
coupling said test program generation engine bo a behavioral simulator; 

15 accepting a set of statements into said test program generation engine, said 
set of statements induding an event; 

responsive to said set of statements, and to information in said l<riawledge' 
base, causing said test program generation engine to generate an Iristrucdon 
that can be executed on said target; 
20 thereafter determining in said behavior simulator whether a triggering condi- 
tion of said event Is satisfied by a simulabed execution of said instruction; 
in a first case) wherein said triggering condition is satisfied, causing said test 
program generation engine to generate a first stream of instructions that can 
be executed on said target; and 
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in a second case, wherein said triggering condition is not satisfied, causing 
said test program generaHon engine to generate a setond stream of Instruc- 
■ Hons that can be executed on said target 

5 35. Ttie computer software product according to claim 34, wherein at least a 
portion of said instruction is generated randomly. 

36. The computer software product according to claim 34, wherein said step 
of determining is performed by evaluating a state of said target prior to inclu- 

10 sion of said instnjcdon in one of said first stream of Instmctions and said sec- 
ond stream of Insbxictions. 

37. The computer software product according to claim 36, wherein said step 
of evaluating said state Is performed prior to said simulated execution of said 

15 instmction- 

38. The computer software product according to daim 36, wherein said step 
of evaluating said state is performed subsequent to said simulated execution 
of said Instruction. 

20 ^ 

39. The computer software product according to claim 36, wherein said step 
of evaluating said state is performed a first time prior to a simulated execu- 
tion of said Instruction and Is performed a second time subsequent to said 
simulated execution thereof. 

25 
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40. The computer software product according to daim 34, wherein said event 
comprises a plurality of events^ each of said events having a priority, value, 
and said step of determining is performed wltii respect to each of said events 
in an order of said priority value thereof. 

5 

41. The computer software product according to claim 34, wherein said set of 
statements is introduced into said test program generation engine as an input 
file. 

ID 42. The compute' software product according to claim 34, wherein said event 
has an Identifying name attribute. . 

43- The computer software product according to claim 34, vyherein said event 
has a triggering condition attribute. 

15 

44. The computer software product according to claim 34, wherein said event 
comprises a stream entity. 

45. TTie computer software product according to claim 34, wherein said event 
20 comprises an Wentifying name attribute, a triggering condition attribute, and 

an input stream entity. 

46. A program test generator, comprising: 
a test program generation engine; 
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a design specification of a target, wherein said design spedflcatlon comprises 
a knowledge base, wherein said test program generation engine IS coupled to 
said design specification) 

a behavior simulator of said target coupled to said test program generation 
5 engine; 

wherein said best program generation engine Is adapted to accept a set of 

statements, ^id set of statements including an event; 

responsive bo said set of statements, and to information in said knowledge 

base, said test program generation engine generates an insb-uction that can 
10 be executed on satd target; 

wherein responsive to said instruction said test program generator (not the. 

behavior simulator) determines whether a triggering condition of said event is 

satisfied by a simulated execution of said instnjction; 

responsive to said behavior simulator. In a first case, wherein said triggering- 
15 condition is satisfied, said test program generation engine generates test In- 

shiictions based on a first stream of insbxidSons that can be executed on said 

target; and 

In a second case, wherein said triggering condition Is not satisfied, said test 
program generation engine generates a second stream of instructions that. 
20 can be executed on said target 

47. The program test generator according to claim 46, further comprising a 
design simulator for simulating said simulated execution. 

25 48. The program test generator according to claim 46, wherein at least, a 
portion of said instruction is generated randomly. 
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49. The program test generator accondfng to claim 46, wherein said beliavior 
simulator determines whether said triggering condition of said evept is saHs- 
lied l3y evalualJng a state of said target prior fcq inclusion of said instruction In 

5 one of said first stream of Instrucbons and said second stream of instrucdohs. 

50. The program test generator according to daim 49, wherein said step of 
evaluating said state is perfbrmeid prior to said simulated execution of said in- 
strudJon, 

10 

51. The program test generator according bo claim 49, wherein said .step of 
evaluating said state Is perfomied subsequent to said simulated execution of 
said instruction. 

15 52. The program test generator according to claim 49; wherein said step of 
evaluahng said state is performed a first time prior to said simulated execu- 
tion of said instruction and is perfomied a second time subsequent to said 
simulated execution. 

20 53. The program test generator acconjing to claim 46, wherein said event 
comprises a plurality of events, each of said events having a priority value, 
and said step of determining is performed with respect to each of sard events 
in an order of said priority value thereof. 
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54. The program test generator according to cfaim 46, wherein said set of 
statements is Introduced into said test program generaUon engine as an input 
file. 

5 55. The program test generator according to darm 46, wherein said event has 
an Idenbfyfng name attribute. 

56. The program test generator according to claim 46, wherein said event has 
a triggering condition attribute. 

10 

57. The program, test generator according to claim 46, wherein said event 
comprises a stream entity. 

58. The program test generator according to claim 46, wherein said event 
15 comprises an Identifying name attribute, a biggering condition attribute, and 

a stream entity. 
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